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Abstract. Given an elliptic curve E and a finite Abelian group G, we consider the problem 
of counting the number of primes p for which the group of points modulo p is isomorphic to 
G. Under a certain conjecture concerning the distribution of primes in short intervals, we 
obtain an asymptotic formula for this problem on average over a family of elliptic curves. 



1. Introduction. 

Let E be an elliptic curve denned over the rational field Q. Given a prime p where E 
has good reduction, we consider the reduced curve, which we denote by E p . In previous 
work [DS13J, we studied the arithmetic function 

M E (N) := #{p : #£ p (F p ) = N}, 

where #E P (F P ) denotes the number of F p -rational points on the reduction. Despite being 
such a natural object to study, it seems that the recent paper of Kowalski |Kow06] is the first 
to introduce the function Me(N) and ask interesting questions about its behavior. Kowalski's 
motivation for studying Me(N) stems from its relation with what he calls "elliptic twins." A 
prime p is called an E-twin prime if there exists a prime q ^ p such that #E P (F P ) = #E p (F g ). 
Then p is an E-twm prime if and only if M E {^E P {F P )) > 1. 

The Hasse bound states that #E P (F P ) is never very far from p + 1. In particular, 
|p + 1 - #£ P (F P )| < 2y/p. It follows that if #£ P (F P ) = N, then 



N~ := (VN-1) 2 <p< (VN+1) 2 -. N + . (1) 



Hence M E (N) is a finite number, satisfying the trivial bound M E (N) <C y N / log(iV + l). In 
[Kow06] . the author shows that if E possesses complex multiplication, then M E (N) <Ce )£ N e 
for any e > 0, and asks if the same might be true for general elliptic curves, but up to now, 
no bound better that the trivial bound is known for curves without complex multiplication. 

In |DS13j . we studied the average behavior of Me{N) taken over a family of elliptic 
curves. More precisely, given integers a, b, we let E a ^ denote the elliptic curve given by the 
Weierstrass equation y 2 = x 3 + ax + b; we let ^ denote the multiset defined by 

= V(A, B) := {E a , b : \a\ < A, \b\ < B, A(E a , b ) ^ 0}. 

Under a suitable conjecture (specifically Conjecture fT71 on page [18] with any 77 < 1/2) we 
showed that there exists an absolutely bounded function K(N) (see equation (|2"U|) on page[T2l) 
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such that if A, B are large enough with respect to N, then 



as iV — > oo. 

Apart from the "arithmetic factor" K(N)N/ip(N), the above result agrees with a naive 
probabilistic model for Me(N) where one supposes that the values #E P (F P ) are uniformly 
distributed in the interval (N~,N + ). This is explained in detail in |DS13j . The occurrence 
of the weight <p(N) appearing in the denominator on the right hand side of (T5]) suggested 
to the authors that perhaps this is another example of phenomena which are governed by 
the Cohen-Lenstra Heuristics |CL84a] ICL84b] , which predict that random groups occur with 
probability inversely proportional to the size of their automorphism groups. The purpose of 
this paper is to explore this connection further by studying the function 

M E (G) := #{p : E p (¥ p ) = G}, 

where G is a finite Abelian group. Given an elliptic curve E, it is well known that 

E p (¥ p ) = Z/A^Z x Z/A^Z, 

for some positive integers Ni,N 2 satisfying the Hasse bound: \p + 1 — NfN 2 \ < 2^/p. For 
much of this work, we will restrict to the case when A^ and A^ are both odd as this reduces 
the number of special cases to consider. 

As with our study of Me(N) in |DS13j . the restriction imposed by the Hasse bound means 
that any prime counted by Me(G) must lie in a very short interval near A" = #G = NfN 2 . 
In particular, all of the primes are of size N, lying in an interval of length AyN. Even the 
Riemann Hypothesis does not guarantee the existence of a prime in such a short interval. 
Thus our work here, as in |DS13j . requires a conjecture (Conjecture [IT]) concerning the 
distribution of primes of size X in intervals of length X v . The case 77 = 1 corresponds to the 
classical Barban-Davenport-Halberstam Theorem. The precise statement of this conjecture 
can be found on page [18] in Section [7J 

Recall that the exponent of a finite Abelian group is the size of its largest cyclic subgroup. 
In particular, for groups of the form G = Z/TViZ x Z/TViA^Z, the exponent of G is given by 
exp(G) = N\N 2 . The following is our main result. 



Theorem 1. Assume Conjecture 17 holds for some rj < 1/2. Let a, /3 > and fixed. Then 
there exists a nonzero and absolutely bounded function K(G) such that for every non-trivial, 
odd order group G = Z/TV^Z x Z/A^A^Z, we have that 



V V(log#G)V/ #Aut(G)log(#G)' 

when #G 00 provided that A,B> (#G) 1 /2(i og #Gf +1 , AB > (#G) 3 / 2 (log #G) /3+2 and 
the exponent of G satisfies tj^#g)« — ex P(C) — #G. Furthermore, the function K{G) is 
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given as a product over primes i by 

K(G) i i ' i ( 




(3) 



where N = j^G = NfN 2 and (j) is the usual Kronecker symbol. 

Many results similar to Theorem [T] may be equivalently (and perhaps more naturally) 
stated as results about counting isomorphism classes of elliptic curves over finite fields which 
possess some desired property In this case, the desired property is having group of F p -points 
isomorphic to G. We now restate Theorem [1] in such an equivalent form. 

Let M p (G) denote the weighted number of isomorphism classes of elliptic curves defined 
over F p with group isomorphic to G. That is, 

E(¥ P )^G 

where the sum is taken over all isomorphism classes of elliptic curves E defined over F p 
and #Aut(E) is the number of automorphisms of E as a curve over F p . It is important to 
distinguish between the similar notations Aut(i?) and Aut(i?(F p )). The former refers to the 
F p -automorphisms of E as a curve, while the latter refers to the automorphisms of E(¥ p ) as 
a group. Now let 

M(G) :=]TM P (G). 
v 

With this notation, Theorem [T]is equivalent to the following estimate for M(G), the weighted 
number of isomorphism classes of elliptic curves defined over any prime finite field with group 
of points isomorphic to G. 



Theorem 2. Assume that Conjecture 11 holds for some rj < 1/2. Let a, (3 > and fixed. 
Then for every non-trivial, odd order group G = Z/iViZ x Z/iViiV^Z, we have 

M( G) ^(A-( G)+0 (^)) #Aut ;*g g(#G) , 

as #G oo provided that the exponent of G satisfies ^ *^ G y < exp(G) < j^G. 

Remark 3. The proofs of Theorems [T] and [2] do not really require that Conjecture [T71 hold 
for a fixed r\ < 1/2. It is sufficient that it hold for intervals of length Y = \/X / {\ogXY +1 . 

The restriction that #G/(log < exp(G) < #G may seem a bit severe. We believe 

that our results should hold in the range (#G)2 +e < exp(G) < #G for any fixed e > 0. 
Proving this would require that we assume a conjecture similar to Conjecture [T7] for primes 
in short intervals and in a fixed arithmetic progression. Unconditionally, it is possible to 
obtain upper bounds of the correct order of magnitude in this larger range. This is the 
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subject of a forthcoming paper with V. Chandee and D. Koukoulopoulos in which we show 
that 

(#G) 2 



M(G) < 



#Aut(G) log(#G9 



or equivalently, 



' ^M B (G)« *° 



^ ^ #Aut(G)log(#G) 



both holding for (#G)2 +<E < exp(G) < #G. However, lower bounds are impossible without 
hypothesis. 

One should not expect our results to hold without some restriction on the size of of the 
exponent. In particular, not all groups of the form G = T,/N{L x 7LjN\N-{L occur as the 
group of points on an elliptic curve over a finite field. For example, the authors of [BPS12J 
have noted that the group Z/11Z x Z/11Z never occurs. This is perhaps surprising at first 
since given a positive integer N and a prime p in the range (CEJ) , a theorem of Deuring |Deu41] 
ensures that there is always an elliptic curve E/¥ p possessing N points. Given a positive 
integer N, we believe that there should always be a prime close enough, but as we noted 
earlier, this is not provable even under the Riemann Hypothesis. A refinement of the Deuring 
result (see Theorem[5]below) implies that given an order iV group G = Z/A1ZXZ/A1.A2Z and 
a prime p = 1 (mod Ai) in the range ([1]), there is always an elliptic curve with E(F P ) = G. 
However, in the extreme case when G = 7Lj~N{L x Z/iViZ, we are looking for a prime p = 1 
(mod Ni) in the interval (Nf — 2N\ + 1, Af + 2Ni + 1), and we should not expect this to 
happen very often as this interval contains exactly three integers congruent to 1 modulo N%. 
In fact, letting At and N 2 vary, it would seem very unlikely (though not impossible) to find 
an elliptic curve E/¥ p with E(F p ) = Z/A^Z x Z/iViA^Z unless N% grows slower than an 
arbitrarily large (but fixed) power of N 2 - Note that this condition is equivalent to assuming 
V^A /N\ > N e , which is equivalent to assuming 

(#G)2+ e < exp(G). 

The remainder of the article is organized as follows. We show in Section |3] how the proof 
of Theorem [1] is reduced to proving Theorem [2, and in turn, how the proof of Theorem [2] 
is reduced to the computation of a certain average of class numbers. The computation 
of this average of class numbers occupies Section @] (see Theorem [10]) and Section \5\ (see 
Proposition [T2|) . In Section |6] we gather together all of our intermediate results to complete 
the proof of Theorem [2j Section [7] contains the precise statement of Conjecture [17] as well as 
the proofs of a couple of auxiliary lemmas which are used in Section HJ Finally, in Section [8] 
we close with some concluding remarks concerning the arithmetic factors K(N) and K(G), 
which are respectively defined by ( J20l) and ([3]). 
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3. Reduction to an average of class numbers. 



In this section we show how the proof of Theorem [T] is reduced to proving Theorem |2j We 
then show how the proof of Theorem [2] is reduced to computing a certain average of class 
numbers. 

Proof that Theorem^ implies Theorem^ For notational convenience, we let iV = #G. The 
Hasse bound implies that any prime p counted by Me(G) must fall in the range (pQ). Hence, 
interchanging the order of summation yields 

^ £ Mjs (G) = J2 *{Ee^:E p {¥ p ) = G}. (5) 



N~<p<N+ 



To estimate the above, we group the E in c ta according to which F p -isomorphism class they 
reduce modulo p. That is, we write 



#{£ G <€ : E p (¥ p ) = G} = #{Eetf:E p (F p )^ p E}, 



(6) 



E/W p 
E(¥ P )^G 



where the sum is over the F p - isomorphism classes of elliptic curves E whose group of F p - 
points is isomorphic to G. We may assume that iV > 8 so that N~ = (vN — l) 2 > 3 and 
only primes greater than 3 enter into the sum over p above. Therefore, we may choose a 
model for each E of the form y 2 = x 3 + ax + (3, and a character sum argument as in jFM96, 
pp. 93-96] yields the estimate 

#{E G : E p (¥p) = E} UD 



#Aut(E)N 



AB 



0[— + VN(hgNy 



N 2 

( AlogN _,_ log N 

ohffi + BlogN*, 
0(A\ogN + ^ 



if a(3 ^ 0, 
if a = 0, 
if = 



(7) 



for N~ <p< N + . 

We now recall the definition of M P (G) as given by 
imply that 



# 



EeV 




1 logiV 
N 2+ ^/W 



Then equations (jSJ), ©, and ([7j) 

N~<p<N+ 



AB 



1 

B 



\logN 1 

/ AT- M+ 



N-<p<N+ 

since jffi = 4AB + (A + B) and there are at most 10 isomorphism classes of elliptic curves 
E/F p with af3 = 0. Recalling that M(G) = J2 P M P ( G ) and { N ~ <P< N+ } < V^/logiV, 



we see that Theorem [T] follows from Theorem [2] provided that A, B > \/N (log N)@ +1 and 
AB > N 3 / 2 (log N)P+ 2 . □ 

Now let N and m be positive integers with m 2 dividing N, and define 

#B(F P )=V 
E(Fp)[m]=Z/mZxZ/mZ 

the weighted number of isomorphism classes of elliptic curves defined over ¥ p which have 
exactly N points over ¥ p and whose F p -rational m-torsion subgroup is isomorphic to Z/mZ x 
Z/mZ. We also define 

M(N;m) := ^ M p (N ; m) , 
v 

the weighted number of isomorphism classes of elliptic curves defined over any prime finite 
field which have exactly iV points over ¥ p and whose F p -rational m-torsion subgroup is 
isomorphic to Z/mZ x Z/mZ. We will compute M(G) by first computing M(N;m). 

Lemma 4. Let G = Z/N{L x Z/N l N 2 'L. Then 

M(G) = Kk)M(NfN 2 ;kN 1 ), 

k 2 \N 2 

where fi(k) denotes the usual Mobius function. 

Proof. Inclusion-exclusion. □ 

We now explain how computing M(N; m) is equivalent to computing a certain average of 
class numbers. Given a negative discriminant d, we let h(d) denote the class number of the 
unique imaginary quadratic order of discriminant d, and we let w (d) denote the cardinality 
of its unit group. The Kronecker class number of discriminant D is defined by 

{) ^ win' 

f\D V ' J ' 

-^■=0,1 (mod 4) 

Given a positive integer N and a prime p, we define the "discriminant polynomial" D^(p) 

by 

D N {p) := (p+l-N) 2 -Ap. (8) 

Adapting the proofs in |Sch87t Lemma (4.8) and Theorem (4.9)] to count isomorphism classes 
of elliptic curves weighted by the size of their automorphism groups, we obtain the following. 

Theorem 5. Let p be a prime, N a positive integer such that \p + 1 — N\ < 2*Jp, and m a 
positive integer such that m 2 \ N. Then the weighted number of ¥ p -isomorphism classes of 
elliptic curves having exactly N points and E(¥ p )[m\ = Z/mZ x Z/mZ is given by 



M p (N; m) 



H ^ j if m \ p — 1 and m 
otherwise. 



N, 



Remark 6. It is easy to check that the conditions m \ p— 1 and m 2 \ N imply that m 2 \ D^{p) 
in the above theorem. 



Remark 7. The corresponding results in |Sch87] are more general as Schoof does not restrict 
to finite fields of prime order. 

As an immediate corollary, we have the following 

Corollary 8. Let N and m be positive integers with m 2 dividing N. Then 



AT— ^ AT-\- ^ ' 



N~<p<N+ 
p=l (mod m) 

4. Conditional estimates for the average of class numbers. 

The following lemma will be useful for bounding various sums that appear in this section. 
We postpone its proof until Section [7J 

Lemma 9. Suppose that N, u, and v are positive integers with u 2 \ N . Let D^(p) be as 
defined by equation ([8]). // (X, X + Y] C (N~ , N + ), then uniformly for uv < Y , 

p = 1 (mod u) | r Y 

#{X <p<X + Y : D N (p) = (mod u 2 v) } < V 



(p jV ) = i J ip{uv)\og(Y/uv)' 

The main result of this section is the following conditional (under Conjecture [UJ) estimate 
for M(N; m), the weighted number of isomorphism classes of elliptic curves E defined over 
any prime finite field which have exactly N points over ¥ p and such that E(F P ) contains a 
subgroup isomorphic to Z/mZ x Z/mZ. 

Theorem 10. Let a, (3 > be fixed, and assume that Conjecture [77| holds for r\ < \. Then 
there exists a function K (N,m) such that for every pair of odd positive integers N and m 
with m 2 | N, 

M{N;m)= Y H ( )= K (N, m) — + O (— —J*—), 
K 3 1 ^ \ m 2 ° V ' J \ogN 1 V (m 2 logiV W+ 1 J ' 

p=l (mod m) 

provided that m < (logN) a . Furthermore, the function Ko(N,m) is given by the absolutely 
convergent sum 

oo 1 oo 1 4n 

K (N,m):= £ jE^^) E Q*C(a,n,f) (9) 

f=l J n=l rv J ' a=l 
m\f a = l ( mod 4 ) 

(/,2)=1 

where 

C N (a,n,f) := {b G (Z/4n/ 2 Z) x : D N (b) = af 2 (mod Anf 2 )} . (10) 

Proof. We begin by using the definition of the Kronecker class number and the class number 
formula to write 

A r ~<p<7V+ N~<p<N+ j2| gjy(p) 

p=l (mod m) p=l (mod m) . . "» , .» 

v ; v ' djv i/ro (p)=0,l (mod 4) 
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where Xd '■= (7) is the Kronecker symbol associated to the discriminant d, 



n 

n>l 



and we write d^jip) '■= Dn{j>)/ f 2 whenever f 2 \ D^ij))- We may assume that iV > 5. As a 
result, the prime 2 does not enter into the sum over p above. Since N is odd, we have that 
D N (p) = (p + 1 — iV) 2 — 4p = 1 (mod 4), and hence it follows that each / above is odd and 
d^jmip) = 1 (mod 4). Therefore, we may omit the congruence condition under the sum 
over / above. Furthermore, if p | / and f 2 \ D^(p) it follows that p = 2, but this is contrary 
to our assumption that N > 5. Since —3 is the largest discriminant possible for an imaginary 
quadratic order, we have that d N j m (p) < —3, and it follows that if (fm) 2 \ D N (p), then 
fm < 2a/A^/3. Therefore, after rearranging the order of summation, we have that 

N~<p<N+ V ' t<X./K N~<p<N+ 

-I / 1 \ <f ID. V 3 -I /_____!__ 



p=l (mod m) J //S^-, 3 p~l (mod m) 

{U2) ~ l (fm) 2 \D N (p) 



Let V be a positive parameter to be chosen. Using Lemma [9] (with u = m and v — f), we 
see that the contribution made to the above by the values of / which are larger than V is 
bounded (up to a constant) by 

log(4iV/(/m) 2 ) ^ n^.rV- 1 _ N 



n y lua ^y u ^ ' y i« N y 



i- 1 9 w 1 3 P= 1 (mod m) 

j " /m 2 |Div(p) 

Pt/ 

Choosing V = (log N) 2 ^ +1 \ we have that 

7V"<p<A r + ' /<V A r ~<p<A r + 

p=l (mod m) (/j2)=l P=l (mod m) 



(fm) 2 \D N (p) (12) 
Pt/ 



+ 



N 



ip(m 2 ) (log N)^ 1 



If C/ > and g? is a discriminant, then Burgess' bound for character sums |Bur63| Theorem 
2] and partial summation imply that 

n=l n<U \v / 



Thus, if we truncate the L-series in ( JT2l) at [/ and use the Brun-Titchmarsh inequality [IK04, 
p. 167], we see that the contribution made by the tail of the L-series is bounded (up to a 
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constant) by 



^23/32 1 jV 39 / 32 

( f™U+7/16 ZZv ^ ^ 



^(M) 1+7/16 ^ ^(m 2 )mVi6 1og(4ViV/m) 

p=l (mod m) 

uniformly for m < v^E- Choosing U = NTefiogN) 2 ^, we have that 

E E (^)vra 

iV-<p<7V+ V 7 /<V ^ n<U N~<p<N+ V 7 

p=l (mod m) (/,2)=1 P=l (mod m) 

(fm) 2 \D N (p) (13) 
pt/ 



+ 



N 



^(m 2 )(\ogN)P+ 1 

At this point, it is convenient to break the interval (N~,N + ) into subintervals of length 
Y = ^ lo ^) 7 j ; where 7 is some fixed positive parameter to be chosen. For each integer 
k el := [-2VN/Y, 2y/N/Y) D Z, we write X = X k := JV + 1 + kY so that 

E ( dj ^)vWM\ = E E (^^)v/i^Mi- (w) 

v-< P <Af+ v " / fee/ x fc<P <x fc +y \ " / 

p=l (mod m) P=l ( mod m ) 

(/m^lDjvb) (/m) 2 |Biv(p) 

On the interval (X,X + E], we approximate y/\D N (p)\ by '° gP - Letting X* be the 

value of t minimizing the function y/\Djf(t)\ on the interval [X, X + E] , we find that 



^\D N (X)\\ogp 



logN 



\ZjVl ogJV 



+ v / _ — — otherwise. 



^/IDjvCX*)! v^logiV 

Using Euler-Maclaurin summation as in |DS13j . it is easy to show 

2nN 



kei 

and 



Ev / IW)l~ + o(v / iv) (15) 



V 1 ^ 1 



Employing these estimates and Lemma M (with u = m and t> = / 2 ), we find that 

E (^)^M=i^E^ra E (%^W 

7V"<p<V+ V ' 7 & kei X k <p<X k +Y v ' y 

p=l (mod m) P=l (mod m) 

(/m) 2 |Djv(p) (/™) 2 |£>iv(p) 
Pt/ Pt/ 



+ 



Y^N 



<p(mf) log(E/m/ 2 ) 
'9 



provided that mf < Y. Summing this error over n and /, we find that the total error is 
U'£wl.)l ) provided that m < Y. Therefore, if 7 = + 1, then 

p=l (mod m) (/ 5 2)=1, P^l (mod m) 

n<U {f m ) 2 \D N ( P ) 



+ 



N 



ip(m 2 )(\ogNy+ 1 



for m as large as iVa e (for any fixed e > 0). It is also convenient to remove those primes 
p which divide n from the innermost sum above. Doing this introduces an error which is 

O (m- 1 v / iV(logV)(logf/) 2 ). Given our choice of U and V, this can easily be absorbed into 

the error term for m as large as N^ £ . 
Now let 

S k (N, ,n;U,V): = £ J- £ (*^) logp 

4<,arr ^ » / 

(/,2)=1, p=l (mod m) 

n<C/ (/m) 2 |£> N (p) 

so that 

v-< P <v+ v 7 6 fee/ as; / 

p=l (mod m) 

Using the fact that the Kronecker symbol (-) is periodic modulo An, we may write 

S k (N,m;U,V)= £ J- £ (-) £ logp. (16) 

/<y ^ a=l V fc <p<V fc +V 

(/,2)=1, f^ 1 ( mod 4 ) p=l (mod to) 

n<C/ (/to) 2 |D jv ( p ) 

d JV,/m(p)=a (mod 4n) 
pfn/ 

We now note that since m 2 \ N, the condition (fm) 2 | D^(p) implies that p = 1 (mod to). 
Therefore, making the change of variables m/ t— > f and reorganizing the innermost sum over 
p, we obtain the identity 

A.TL 

S k (N,m;U,V)= £ - £ GD £ D l0gP ' 

/<toV j o=l 66Cjv(a,n,/) X fe <p<X fe +V 

to|/ «=! ( mod 4 ) p=6 (mod 4n/ 2 ) 

(/.2)=1, 
n<f7 



where 



C N (a,n,f) := {b G (Z/4n/ 2 Z) x : 1^(6) = a/ 2 (mod 4nf 2 )} . 
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We choose to approximate Sk(N, m; U, V) by 



1 4n 

S h (N,m;U,V):= J2 - £ (±) #C N 



[a,n,f) 



Y 



f<mV J " a=l 
m\f 0=! ( mod 4 ) 

(/.2)=1, 
n<U 



ip{4nf 2 ) 



It is at this point that we must impose the condition that m < {\ogN) a . To bound the error 
in the above approximation, we use Cauchy-Schwarz and Conjecture [£7J to see that 

6(X k ,Y;4nf,b)- 



S-S 



< 



m\f, 
n<U 



< 



^7 

f<mV J 
m\f 

Y 



feS(Z/4n/ 2 Z) x 






1/2 " 




,n<U 1 





ip(Anf 2 



E E \E(X kj Y-Anf\b)\ 

n<U 6e(Z/4n/ 2 Z) x 



-| 1/2 



(logiV)" 

for any choice of v > since 4[/m 2 7 2 < 4iV 7 / 16 (logiV) 2a+6/3+4 < F/(log N) v+1 . Summing 
this error over k E I and choosing v = 2a + 0, we have that 



E * 



N~<p<N+ 
p=l (mod m) 



kei 



+ 



N 



<p{m 2 )(\ogNy +1 



since m < (\ogN) a . Now, let 



111 



f ^ rupUnf 2 ) 

f<mV J n<U rV ^ 7 a=l 

m|/ a=sl ( mod 4 ) 

(/,2)=1 



With this notation, we may rewrite the above as 



E » 



N~<p<N+ 
p=l (mod m) 



D N (p) 



Y 



2n log N ^ 

6 fee/ 



E vT^pfe)IXo(7V, m; [/, 7) 



(19) 



+ 



iV 



^(m^logAO^ 1 . 

We now require the following lemma whose proof we postpone until Section [7J 
Lemma 11. For e, U, V > 0, 



K (N, m) = K (N, m; U,V) + O 

n 



+ 



log log N 



<p(m 2 )y/U ^>{m?)V J ' 



Given our choice of U and V, this lemma together with (fT5|) and (fl9l) are sufficient to 
complete the proof of the theorem. □ 



5. Computing the arithmetic factor K (N,m). 

The main result of this section is the following factorization of K (N,m) as an Euler 
product. 

Proposition 12. Let m and N be odd positive integers with m 2 | iV ; and let K (N,m) be 
as defined in Theorem[Wi Then 

K (N,m) = - K(N)K(N,m), 
(p{J\l)m z 

where 

Ar(jv,m):= n (^m-^-lJ II ( ^ )+2 _^ )+1 _ £+ ^) 
and 

- n(i - ^kikrp J n l 1 - 1 - • (20) 

2f^(-AT) 2|^(Af) 

i/ere i>e(N) is the usual i-adic valuation, := N/£ n ^ N ' denotes the i-free part of N , and 
(j) is the usual Kronecker symbol. 

Remark 13. It will be convenient in the next section to note that K(N) is absolutely bounded 
as a function of N, N/ip(N) <C log log N, and K(N,m) <C •mj^im) <C log log m. 

We note that Kq(N) = Kq(N, 1) was computed in |DS13j . We will appeal often to results 
from [DS13j in our computation of Kq(N,17i). 

Proof of Proposition [IS We begin by using the Chinese Remainder Theorem to write 

f=l ■> n =l rv J ' o£(Z/4nZ)* £[4n/ 
H/ a=l (mod 4) 

(/,2)=1 

where for each prime I dividing 4nf we write 

C$ (a, n, /) := {2 G (Z/^ (4n/2) Z)* : D^(z) = a/ 2 (mod £^ (4n/2) )} . 

We note that if £ is a prime dividing / but not n, then af 2 = (mod £^( 4n / 2 )). Hence, it 

is clear that #C$(a,n, f) = #C$(1, 1, /) if i \ f but i \ n. In [DS131 Lemma 10] it was 
shown that 

#C%\a,nJ) = 2S 2 (n,a), 

12 



where 

(2 if z/ 2 (4n/ 2 ) = 2 + v 2 {n) = 2, 
S 2 {n, a) = < 4 if z/ 2 (4n/ 2 ) = 2 + z/ 2 (n) > 3 and a = 5 (mod 8) 
I otherwise. 
Therefore, letting n' denote the odd part of n and 



CNj(n) := J2 (-)s 2 (n,a)H^(a,n,f), 

\ 71/ / 



ae(Z/4nZ 
a=l (mod 4) 



we may write 



00 00 
K (N,m)= T .Y1 



m\f 
(/,2)=1 



n#^(a,n,/) 



_t\n 



c Nj{n) 



(/,2)=1 



/M/) ^(n,/W(4n) 



cjv,/(w), 



(21) 

where the / on the sum over / is meant to indicate that the sum is to be restricted to those / 
that are not divisible by any prime i for which #C$(1, 1, /) = 0. The following was shown 
in [DS13] . and we state it here without proof. 

Lemma 14. Suppose that N and f are odd. The function cjv,/(n) is multiplicative in n. Let 
a be a positive integer and I an odd prime. Then 



Ifi \ f andi\N, then 

Ifi \N andi\f, then 
Ifi\Nf, then 



ffa-l 



cnj(2 c 

OQ-1 



#C^(1,1J) 



-l) a 2. 



1 if 2 I a, 
if2\a. 



ffa-l 



- 2. 



rf)|M-(f)-(¥) 2 if 2 



Oi. 



ffa-l 



if2\a. 



Ifi I (f,N) and 2u e {f) < v t {N), then 

CNAn 



#C$(l,l,/)(*-l). 
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ffa-l 



If I I (/, N) and u t {N) < 2v t {f), then 



#C#(1,1,/) 



- 1 if 2 | a, 
z/2fa. 



//£ | (f,N) and u e (N) = 2i/ e (f), then 



Pa-l 



#c^(i,i,/) 



A, 



(f) 



-A', 



+ 



-N, 



(() 



»/ 2 | a, 
i/2ta, 



where Nm = N/£ V ^ N > denotes the i-free part of N. 

Using this result, the sum over n in equation ( 12T1) may be factored as 



2y((n,/)) 
^ (n,/)n^(4n) 



n #^d,i,/) 

<l(/.n) 



42/iv e\f 



l\N 



where for any odd prime £, we make the definitions 

- 2 



i + 



{i -if 



F 2 (£J) ■={ 




A, 



- 1 



ifv £ (N) <2v t (f), 
i£vt(N)>2vt(f), 

Hu e (N) = 2u t (f). 



e(P - 1) 

Substituting this back into equation (j2ip and rearranging slightly, we have that 



£|7V /=1 -T\J IJ e\(f,N) UV 7 £|/ V ' 

m\f l\N 
(/,2)=1 



In |DS13] , we showed that for any odd prime power £ a , 



#c^(i,i,n = { 



i 



jV(jV-l) 2 



]£ £\ N, 

if 1 < v t {N) < 2a, 2 | i^(JV), and (^) = 1, (23) 

if 2a < z^(iV), 

otherwise. 
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Hence, the sum over / in equation ( 122]) may be factored as 

2. ^7575 11 -7^11-7^- 11 W 11 W 11 m 

f=l £|(/,AT) UV y «|/ iV 7 £{2JV €[iV «[m 

m\f i\N l\m 

(/,2)=1 

where for any odd prime £, we make the definitions 



1 



F 3 (£) := 1 + 
1 



jV(jV-l) 2 



^(^+1)^-1)*' 
/ gM N ) - £ 



Hi) ■= { 



F {£)£^ N \£- 1)< 



if 2\v t (N\ 



£MN) _£ + 



1 + 



(0 



' £(£ Ue ^ — £ 2u e( m )) 



if 2 I u £ (N); 



£MN)(£-iy 

£u e (N)+2 _ g2is e (m)+l 1 ( - N W \ £2v l \m) 



F (£)£ 2 ^m) 

Substituting this back into equation (|22l) . we have that 



$2\vt(N), 



if 2 I v,{N). 



K (N,m) = - l[F 1 (£)F 3 (£) ]JF Q (£)F 4 (£) ]JF q (£)F 5 (£) 



2/V 



e\N 



l\m 



e\2N e\N 
The result now follows by simplifying the factors. 



(24) 



□ 



6. Removing the larger group structures. 

In this section we complete the proof of Theorem [2J Before doing so, we require the 
following lemma. 

Lemma 15. Let G = ZjN{L x ZjN x N 2 Z, and write N = #G = NfN 2 . Then 

#G N £2 j_ 

#Aut(G) v(N)N 2 J-J- £ 2 — 1 £-\ 

4^2 



Proof. See [HR071 Lemma 2.1 and Theorem 4.1]. □ 
Remark 16. From the above factorization it is easy to see that #G/#Aut(G) > l/ip(N±). 
We now combine all of our intermediate results to give the proof of Theorem [2j 
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Proof of Theorem® Let N = N?N 2 = #G. Then the condition exp(G) > #G/(\og#G) a 
is equivalent to N\ < (logiV) . Now choose any 7 > /3 + 1. By Lemma HJ we have 

M(G) = K k ) M ( N ; kN i) + v(k)M(N;kNx). 

k 2 \N 2 k 2 \N 2 
k<{logN)~> £:>(logiV) 7 

In |Len87l p. 656], we find the standard bound H(D) <C y\D\ log |D|(loglog \D\) 2 . Using 
this, Corollary |H1 and the Brun-Titchmarsh inequality [IK041 p. 167], we have that 



E ,«m ( ™« E E »^ 

k 2 \N 2 k 2 \N 2 N~<p<N+ 1 

fc>(logAf)T A:>(log N)t p=l (mod fcJVi) 

iVlogiV(loglogiV) 2 1 

N 



(^(^^(logA^)^ 1 ' 
Applying Theorem [TD] for the small fc, we find that 

fc<(log-/V)T 

By the remark following the statement of Proposition [12l 

E E 



PiV 2 w(iV 1 2 )(logiV)^+ 1 ' 

fc 2 |7V 2 fe>(logAT)^ 1 W 1A 6 ; 

fc>(logAf)T 



and therefore, 



Using Proposition [TJJ we have that 

£ M^o(iV, k Nl ) = -t^K(N) ^K(N, k Nl ). (26) 

fc 2 |AT 2 ^ ' 1 k 2 \N 2 

Now let K^'(N,m) stand for the factor of K(N,m) coming from the prime £, i.e., 

' gv t (N)+l _ £2u e (m) 



m) 



£u e (N)+l _ £u e (N) _ I 

£v e (N)+2 _ £2u e (m)+l _|_ ( ^ N ( l) \ £ 2 Mm) 
£ut{N)+2 _ £u t {N)+l _ £ _|_ 



if £ I m and 2fz/ € (JV), 
if £ I m and 2 I u t (N). 



16 



Then by multiplicativity, we have that 

m w., r- nr \ _ TT ,AC, V- («(*) IL|. 



n n (i - ^F) n (*«w*> - 



t 2 \N 2 i\Ni £\Ni 

Recalling the definition of K(N) as given by equation ( l20i) . we find that 

k(n) yj aW K{Nt kNl) = n A _ n ptfftw n f4t^m n «w. 

t\N 2 e\N 2 e\N 2 

where for each odd prime £, we make the definitions 



F 6 (£) :=1 + 



:= 1 ' 



Substituting the above into equation ( 1261) and using Lemma [151 we find (after some slight 
rearrangement of the factors) that 

fc 2 |Ar 2 V 7 

where K(G) is defined by equation ([3]). The result now follows by substituting this into 
equation (1251) and using the remark following the statement of Lemma [151 D 

7. Conjecture [T7] and proofs of Lemmas M and [TTJ 

In this section, we give the precise statement of the conjecture for the distribution of 
primes in short intervals that is needed to prove Theorems [H and [21 We also present the 
proofs of Lemmas [9] and [TH 

Given real parameters X, Y > and integers q and a, we let 9(X, Y; q, a) denote the 
logarithmic weighted prime counting function 

9(X,Y;q,a):= £ logp, 

X<p<X + Y 
p = a (mod q) 

and we let E(X, Y; q, a) be the error in approximating 6(X, Y; q, a) by Y/(p(q). That is, 

E(X,Y;q,a):=e(X,Y;q,a)-Y/<p(q). 
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Conjecture 17. (Barban-Davenport-Halberstam for intervals of length X n ) Let < r] < 1, 

and let (3 > be arbitrary. Suppose that X v < Y < X, and that Y/ilogX) 13 < Q <Y. Then 

Q 

Yl \E(x,Y ]q ,a)\ 2 «rgio g x. 

Remark 18. If 77 = 1, this is essentially the classical Barban-Davenport-Halberstam Theorem. 
See for example |Dav80l p. 196]. The best results known are due to Languasco, Perelli, and 
Zaccagnini [LPZ10] . who show that Conjecture[T7|holds unconditionally for any 77 > 7/12 and 
for any rj > 1/2 under the Generalized Riemann Hypothesis. For the proofs of Theorems [1] 
and [21 we essentially need to assume that it holds for some 77 < 1/2. 

Proof of Lemma\Q First, we make the definition 

A*,«(0 := (I - N/uf - AN/u 2 , (27) 

and note that this is a quadratic polynomial in I with integer coefficients since u 2 \ N. We 
also note that if p — 1 + lu, then A N;U (l) = D N {p)/u 2 . Therefore, 

p =1 (mod u) 
#{X<p<X + Y: D N {p) = (mod u 2 v) 

(p, v) = 1 

p =1 (mod u) 
#{X<p<X + Y: ^ N ,u(^r) =0 (modv) 

(p, v ) = 1 

^2 #{X<p<X + Y:p = l + lu (mod w)}. 

l<K-u 
(l+lu,v)=l 
Ajv )U (Z)=0 (mod v) 

Using the Chinese Remainder Theorem, it easy (though perhaps a bit tedious) to show that 

#{/ e Z/vZ : Ajv,„(/) = (mod v)} < 8^v. 

We refer the reader to |DS131 Lemma 12] where the same bound is shown for the polynomial 
Dn{p)- However, the same proof goes through for any monic quadratic with integer coef- 
ficients. The above inequality together with the Brun-Titchmarsh inequality [IK04[ p. 167] 
implies that 

f V = 1 ( m o d u) ] r- y 

#{X<p<X + Y: D N (p) =0 (modu 2 v) } « f (28) 
[ (p,v) =1 J <p\uv)]og{Y/uv) 

uniformly for uv < Y . □ 

Proof of Lemma [771 In [DS13], we showed that 

CNj{n) < 



nIL|C/,»)#CW(l,l,/) 
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where for any integer m, K m {n) is the multiplicative function defined on prime powers by 

I 1 otherwise. 

Therefore, 

K (N,m)-K (N,m;U,V) 

,Yli\ f #C%\l,lJ) 2<p((nJ))c NJ (n) 



f<mV ^W) (n, /)n^(4n) #C$(1, 1, /) 

m\f 

/ iLi/^ff (M,/) 2y?((n, f))c NJ {n) 

f>mV 

fMf) & (n, f)n<p(An) U il{nJ) #C$(1, 1, /) 

m|/ 



m\t 
(/,2)=1 

ElL|/ (1; 1) /) y- 



(30) 



m\t 
(/,2)=1 



where the primes on the sums on / are meant to indicate that the sums are to be restricted 
to odd / such that #C$(1, 1, /) ^ for all primes £ dividing /. 
In [DP99t Lemma 3.4], we find that 



y— 



Co 



u Ki(n)(p(n) 

for some positive constant Cq. In particular, this implies that the full sum converges. From 
this we obtain a crude bound for the tail of the sum over n 

y - = y - = y — y - 

^ K 2N (nMn) ^ Kx(l)<f(l)(p{k) ^ <f(k) ^ k^I) 

(l,2N)=l £\k^£\2N (Z,22V)=1 

e\k^e\2N 

1 Vk 



y J_xK < • —Y[(\ 1 \ 

h VuH{ (£-l)(Vl-l)J 

k^£\2N 

1 N T-r ( 1 \ / 1 

1 + ^= 



£/#)}j}\ Ve(£-i)J\ V£ 
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We have already noted that N/tp(N) <C log log N. It is a straightforward exercise as 
in [MV071 p. 63] to show that 



S(-a<-{°(®)} 



e\N 

Thus, we conclude that 

^ 1 N e 

> r~y / x < -F= ( 31 ) 

for any e > 0. For the full sum over n, we need a sharper bound in the iV-aspect, which we 
obtain by writing 



S « 2iV (nMn) n( 1+ (i _i)2j E « 2JV (n)^(n) 

(n,2jV)=l 

2iV yj / 1 \ >^ 1 ( 32 ) 

" ^2iV) 11 V 1 + W^T)) ^ «!(n)^(n) 
< log log AT. 

For any odd prime I dividing /, we obtain the bounds 

,(/), n n ^ / f 2^W/ 2 if Mf) > MN)/2 and 2 | u t (N), 



^ * V ' _ otherwise 
from equation ff23l) . Therefore, for every odd integer /, we have that 

n#cj?(i,i,/)</, 



and hence 



4/ 



/w)' < f £w)%wi'' (33) 

m|/ m\f 
(/,2)=1 

Substituting the bounds ( 13~TT) . ( 132]) . and ( 1331) into ( 1301) . the lemma follows. □ 

8. Concluding remarks. 

There are many open conjectures about the distribution of local invariants associated with 
the reductions modulo p of a fixed elliptic curve defined over Q as p varies over the primes. 
Perhaps the most famous examples are the conjectures of Koblitz |Kob88] and of Lang and 
Trotter [LT76]. The Koblitz Conjecture concerns the number of primes p < X such that 
#E(W P ) is prime. The fixed trace Lang- Trotter Conjecture concerns the number of primes 
p < X such that the trace of Frobenius a p (E) is equal to a fixed integer t. Another conjecture 
of Lang and Trotter (also called the Lang- Trotter Conjecture) concerns the number of primes 



p < X such that the Frobenius field Q(a/ a p (E) 2 — Ap) is a fixed imaginary quadratic field. 

These conjectures are all completely open. In order to gain evidence, it is natural to 
consider the averages for these problems over some family of elliptic curves. This has been 
done by various authors originating with the work of Fouvry and Murty |FM 96j for the 
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number of supersingular primes (i.e., the fixed trace Lang- Trotter Conjecture for t = 0). 
See [DP991 iDPOl IJam04l IBBIJ051 [JSTTT ICFJ+Ilj for other averages regarding the fixed 
trace Lang- Trotter Conjecture. The average order for the Koblitz Conjecture was considered 
in [BCDllj . Very recently, the average was successfully carried out for the Lang- Trotter 
Conjecture on Frobenius fields [CUj . The average order problems that we consider here and 
in |DS13j have very different features than the above averages. This is primarily because 
both Me{G) and Me(N) count finite sets of primes whose sizes vary with the parameters 
G and N, whereas the above problems seek estimates for the densities of (what are believed 
to be) infinite sets of primes. 

Much like the conjectural constants appearing in the Twin Prime Conjecture and the more 
general Bateman-Horn Conjectures [BH62J, the constants in the conjectural asymptotics for 
the Lang- Trotter Conjectures and the Koblitz Conjecture can be written as Euler products 
in which the local Euler factors at each prime £ can be understood in terms of the probability 
that p satisfies the desired property modulo I. Thus, for those conjectures, the constant from 
the average asymptotic gave strong evidence for the original conjectures as one retrieves 
the local Euler factors of the conjectural constants (forgetting about a finite number of 
"exceptional primes" for each elliptic curve). 

In the questions considered in |DS13] and the present paper, it does not seem very likely 
that there should be an asymptotic for a fixed elliptic curve. Moreover, the "constants" 
K(N) and K(G) (defined by ( 120|) and ([3]), respectively) are much more peculiar. In the first 
place, they are not truly constant. In the second place, it is not completely clear how to 
understand them in terms of local probabilities. However, there are some parts of K(N) 
which do seem to fit those local probabilities. More precisely, given an elliptic curve E/Q 
without complex multiplication, for all but finitely many primes £, we have an isomorphism 
Gal(Q(E[£))) = GL 2 (Z/£Z), where Q{E[£)) denotes the field obtained by adjoining to Q the 
coordinates of the ^-division torsion points E[£]. Furthermore, #E P (F P ) = p + 1 — a p (E) = 
det(crp) + 1 — tr(op) (mod £), where a p denotes any element of the image of the Frobenius 
class at p in GL2(Z/£Z). Letting 

C N (£) := {g G GL 2 (Z/ff) : det(g) + 1 - tr(g) = N (mod £)}, 

one readily finds in the case that £ \ N, 

#C N (£) 

Probpo +l-ap(E) = N (mod £)) #GL 2 (Z/IZ) 
Prob(n = N mod £) 1 

^ (e-me+i))' 

where the denominator is the probability that a random integer n is congruent to N modulo 
£. That is, we find agreement with the Euler factors of K(N) at the primes £ not dividing N. 
It should be noted that Euler factors of K(N) and K(G) agree that the primes £ not dividing 
iV = j^G. The local factors of K(N) at the primes £ dividing N are more subtle. Some 
of the issues appearing in the analysis of those local factors are addressed in |MPSj . where 
a statistical analysis of the function K(N)N/(p(N) has been carried out. Employing a new 
technique to address moments of functions which are "almost but not quite multiplicative," 
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the authors show that 

fi£ { } cp(N) log N~3h^' 

2\N 

Note that this is what one should expect as exactly 1/3 of the elements of GL2(Z,/2Z) have 
odd trace (i.e., satisfy the condition det(g) + 1 — tr(g) = 1 (mod 2)). In collaboration with 
the authors of [MPSJ, the authors of the present paper are studying further properties of the 



function K(N) which could lead to a probabilistic model for the local factor at the primes 
dividing N. It seems that those could eventually be understood by looking at probabilities 
on the group GL 2 (Z^). 

As far as we know, no statistical analysis similar to |MPS] has been made for K(G), but 
this could certainly be an interesting avenue of research. 
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